Update permissions for GCP

The addInstances and removeInstances for instance groups should actually be the update permission. The listInstances just needs instanceGroups.get. The addInstance and removeInstance for targetpools also needs instances.use.
openshift · Jan 8, 2024 · cb83690 · cb83690
1 parent eb66262
commit cb83690
Showing 1 changed file with 2 additions and 3 deletions.
diff --git a/manifests/0000_26_cloud-controller-manager-operator_16_credentialsrequest-gcp.yaml b/manifests/0000_26_cloud-controller-manager-operator_16_credentialsrequest-gcp.yaml
@@ -36,13 +36,12 @@ spec:
     - "compute.httpHealthChecks.delete"
     - "compute.httpHealthChecks.get"
     - "compute.httpHealthChecks.update"
-    - "compute.instanceGroups.addInstances"
     - "compute.instanceGroups.create"
     - "compute.instanceGroups.delete"
     - "compute.instanceGroups.get"
-    - "compute.instanceGroups.listInstances"
-    - "compute.instanceGroups.removeInstances"
+    - "compute.instanceGroups.update"
     - "compute.instances.get"
+    - "compute.instances.use"
     - "compute.regionBackendServices.create"
     - "compute.regionBackendServices.delete"
     - "compute.regionBackendServices.get"